Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c75b412a-1d88-3830-ad50-cd7950cc3ab2.roa
File:                     c75b412a-1d88-3830-ad50-cd7950cc3ab2.roa (raw, json)
Hash identifier:          0VJGjEAR6Vki3VC5GvSa3tvs97x6MKZomHjhXrpbWXM=
Subject key identifier:   8D:3C:24:43:49:9E:20:0F:D6:AA:48:D9:88:D7:CA:79:51:0E:99:65
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584E1E44454070A75DD8100EC8C0
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c75b412a-1d88-3830-ad50-cd7950cc3ab2.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     61317
IP address blocks:        94.72.178.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:45:40:70:a7:5d:d8:10:0e:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=d5188ba6-be5c-4ae8-ae6b-835f01ec4db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6e:6b:1a:06:0f:cb:6f:d7:1b:6c:f1:1d:cb:
                    5d:a7:dc:31:a9:3d:64:d3:0a:43:62:4c:a3:e7:a6:
                    3a:29:0e:ec:cb:65:4c:2f:fd:b2:f2:46:37:af:8d:
                    ef:23:e1:19:ee:a2:2a:dd:82:5a:55:ad:32:a8:25:
                    0e:a7:da:a0:fe:b3:de:ea:d1:4d:99:6c:26:1e:a9:
                    c4:10:17:fa:b9:be:dd:d1:67:d7:36:f8:f0:3f:e3:
                    69:09:7d:46:cd:07:8d:1d:72:dc:cf:b3:2d:59:52:
                    42:a9:52:d3:23:8f:33:b8:59:68:d3:ad:5c:0f:c9:
                    f5:54:20:09:b5:6a:01:e5:88:bc:2d:fd:ef:ac:d3:
                    81:2c:b4:00:a8:a1:48:80:e2:cd:49:f7:67:a4:5d:
                    0a:99:1f:97:5f:85:fb:1b:d9:c5:19:f3:c6:61:7f:
                    8b:eb:54:1e:5a:a9:49:79:e3:23:1c:63:56:5e:92:
                    bd:2b:77:de:80:9f:89:75:31:52:1a:86:8c:99:79:
                    55:e8:ea:14:21:d6:27:35:a9:cf:39:65:9e:b6:86:
                    31:92:63:e2:a5:9f:de:2e:60:84:05:83:ea:8d:96:
                    0e:f5:f0:c6:c0:98:5a:fd:f0:f8:d0:93:12:8c:ba:
                    38:a0:91:6a:d2:f8:f2:7a:2a:e3:dc:89:2c:36:8a:
                    3c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3C:24:43:49:9E:20:0F:D6:AA:48:D9:88:D7:CA:79:51:0E:99:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c75b412a-1d88-3830-ad50-cd7950cc3ab2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.72.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:34:e7:d5:36:bf:72:ef:bd:09:6f:aa:2a:30:28:c3:2b:e8:
         2d:d0:e6:8c:33:f1:da:28:a4:26:9c:ef:02:cd:7e:89:05:19:
         eb:67:e3:0d:8e:a5:23:c3:47:ad:21:5a:1a:2b:62:4c:98:fa:
         8e:c9:d0:7a:ee:ac:1d:53:14:2c:fe:57:75:90:4e:37:db:fe:
         4f:d8:b3:77:1b:92:da:44:3d:12:ad:d0:90:9b:1d:e6:ed:68:
         c6:6a:08:06:7e:07:7f:ae:9f:c1:bb:75:10:b3:bc:3b:e9:da:
         69:37:8c:d5:0f:1d:db:82:d7:08:d8:16:18:c0:b7:67:c4:df:
         f3:1f:0e:9c:cc:71:94:2c:af:c1:df:dd:a9:80:77:69:f9:39:
         40:ce:e0:c2:90:99:63:d3:cd:ba:ef:17:a1:b8:54:f8:a0:96:
         d7:6a:a4:94:d5:82:be:83:40:14:8f:51:3c:b5:a6:3a:73:f1:
         b0:4b:9e:82:bb:30:7e:cb:32:df:a9:b3:18:0b:80:d6:de:f0:
         f2:e7:4b:f9:c8:dc:8b:90:04:51:40:e8:4c:f7:c9:5e:e6:ff:
         fa:a3:59:e7:7b:50:2c:b3:81:b2:42:23:86:dc:a8:d0:f3:7d:
         ed:dd:54:9f:ea:19:a2:91:82:95:86:6e:57:57:21:12:5d:ac:
         68:1c:6a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:04:07 2026 by rpki-client